Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/34352e3136312e3231362e302f32322d3332203d3e20313938393439.roa
File:                     34352e3136312e3231362e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          2A8DGEwQVj7hqpEDa+60e2PTq98apP58q3q5d8xJgCY=
Subject key identifier:   34:C7:CB:B0:D8:77:E0:7E:82:D6:60:B4:69:93:21:8A:97:DF:22:3C
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       7C1DF08090AD08D90C2F27F5F6D44B10FD90BD7D
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/34352e3136312e3231362e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 22 Aug 2025 15:18:26 +0000
ROA not before:           Fri 22 Aug 2025 15:13:26 +0000
ROA not after:            Fri 21 Aug 2026 15:18:26 +0000
asID:                     198949
IP address blocks:        45.161.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1d:f0:80:90:ad:08:d9:0c:2f:27:f5:f6:d4:4b:10:fd:90:bd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Aug 22 15:13:26 2025 GMT
            Not After : Aug 21 15:18:26 2026 GMT
        Subject: CN=34C7CBB0D877E07E82D660B46993218A97DF223C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:2d:0e:bf:a6:a1:93:2d:8e:77:08:9d:02:
                    4b:86:1e:b8:06:c2:15:f6:b9:ef:6e:4f:0a:c2:93:
                    80:3c:6f:91:d0:d0:24:f9:ac:86:43:63:9e:63:96:
                    2e:74:b3:ad:ef:31:a9:9e:1c:cd:f1:53:e8:d7:fd:
                    1d:50:93:25:c5:c6:5d:78:c0:b5:fc:72:fa:94:f3:
                    0c:86:c3:50:23:b4:ce:7b:17:46:ae:d2:36:7d:3c:
                    a7:72:84:da:6b:07:ec:5f:c5:ce:14:90:35:ec:11:
                    84:4e:ab:99:51:f5:a1:7a:21:97:ea:93:63:e8:eb:
                    6e:95:7a:17:4d:0e:18:7f:bf:55:40:72:2b:2b:5d:
                    80:f5:de:61:1c:f0:2c:78:36:67:70:ab:13:88:4a:
                    f6:0e:c6:98:36:d9:a6:04:b0:2d:9e:0f:f8:72:02:
                    07:18:23:6c:b6:2a:23:3b:51:83:b5:6f:43:79:67:
                    39:b0:85:4e:32:e6:4a:42:34:b9:e0:bf:da:7a:9f:
                    1c:93:b4:70:c3:d7:7e:b7:80:45:be:55:fe:cd:87:
                    1b:9b:4e:d1:20:27:22:d8:e6:16:4d:4f:75:a9:30:
                    b4:6c:81:63:c1:c7:43:95:c2:cd:03:3b:29:65:2f:
                    15:5e:d4:dd:e4:be:99:c8:97:59:f4:09:e6:86:24:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:CB:B0:D8:77:E0:7E:82:D6:60:B4:69:93:21:8A:97:DF:22:3C
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/34352e3136312e3231362e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:06:3e:d4:6b:48:57:64:2c:b3:80:0d:01:f5:5b:88:3c:
         74:29:89:ee:05:25:98:65:2b:0a:b0:da:2e:30:4a:12:64:cc:
         2d:04:85:b3:6f:1c:ea:f6:3d:07:f8:1f:df:52:d6:45:eb:ca:
         e6:83:63:f0:d5:4f:c3:e7:76:5c:d6:44:c6:8b:22:63:42:33:
         7e:c6:b2:da:8d:5d:84:f4:df:ea:81:0a:f0:81:14:9d:1d:2a:
         c8:03:ec:76:bb:24:4b:b7:be:76:0a:69:a2:fc:53:27:f0:86:
         66:82:2e:15:33:91:ad:c2:8f:d8:6e:52:77:04:3d:3b:bd:23:
         37:fe:ff:5d:a1:88:43:20:34:67:9c:f1:c9:ad:89:75:0f:f0:
         28:60:63:21:2c:86:5a:47:ad:4d:4e:42:d1:e9:01:0b:83:ea:
         42:df:33:32:c0:2e:a7:87:63:9a:d9:3b:16:fe:0f:5e:70:57:
         ea:e2:99:08:93:6c:56:7d:56:60:97:c2:f6:63:64:0d:28:87:
         08:86:4a:83:a9:89:82:cd:bd:54:7a:57:39:67:61:d4:3a:b0:
         eb:95:ac:ef:9c:50:3f:ce:32:7c:e4:a7:1d:55:49:7d:28:94:
         40:83:be:7f:0b:73:30:01:69:85:7a:fc:81:7a:72:0d:05:cc:
         20:d7:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:57 2025 by rpki-client